Security is not a product, but a process.
0
votes
1answer
65 views
security_error_ring_buffer_recorded in system health log - what does it mean?
Our company is running a few servers for a couple of websites. The server are running Windows Server 2012 and for databases we have MS SQL Server 2012.
Today I was checking the log files located in:
...
3
votes
3answers
106 views
Are OTP/OATH (RFC 4226) Hardware Tokens Re-seedable?
We set up a two-factor authentication system that uses Google Authenticator to use OTP via mobile phone apps. Some of our users however don't have smart phones so we want to be able to use hardware ...
0
votes
3answers
74 views
Is it bad to store server SSH keys in version control?
We are writing scripts to automatically redeploy our servers. These scripts are stored in version control.
Some of the servers require access to private Git repositories with access restricted by ...
0
votes
0answers
40 views
Is the connection from PHP to a different MySQL server 100% secure?
I tried to find this information but was not able to.
How is working the connection from PHP to MySQL server.
As the password is sored plain, is it also sent plain to MySQL if it is stored on a ...
0
votes
2answers
40 views
selinux Missing type enforcement (TE) allow rule
When I run my FTP test to test for full functionality, I'm concerned on why am I getting an avc denial error on such a popular command, such as 'mkdir'?
Here is the AVC denial message:
type=AVC ...
1
vote
0answers
25 views
wildcard ssl cert. giving error in IE
have a wildcard ssl cert issued to: *.domain.com
The cert. is used on 4 virtual hosts in apache2:
mail.domain.com
gis.domain.com
data.domain.com
timecard.domain.com
Firfox works great, no ...
1
vote
2answers
51 views
selinux avc: denied issue
I just setup a web hosting server with selinux in permissive mode, meaning it's unsecured but writing issues to the message log file. Once I have fixed all the avc: denied errors, I will put the ...
0
votes
1answer
55 views
How to prevent user(s) to log in from tty [closed]
I have a personal computer running under OpenSUSE, and several users can log into this computer using their own identifiants, present in the passwd (which is automatically updated when connected to ...
2
votes
2answers
152 views
How can I automate a new linux server's initial setup?
Every time I setup a new server, I follow a series of steps on each server in order to get updates, set passwd, remove login via root user, customize a familiar environment (bashrc) and secure the ...
0
votes
3answers
59 views
watch file to see whos accessing/writing it and log it
I am facing some malware problems on my webserver.
I updated third party software such as Wordpress to the latest version, disabled root logins and my users password complex enough but still someone ...
0
votes
1answer
40 views
Is it possible to do Session hijacking through ssh proxy or vpn tunnel?
I used ssh proxy to visit my gmail some days ago.
Firefox uses autoproxy that setting the proxy server 127.0.0.1 (port is the same as tunneling setting) and select socks5, then I run tunneling and ...
0
votes
1answer
64 views
DNS Reflector Attacks — protection
[~]# /usr/bin/dig +recurs @MYIP www.facebook.com
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.5 <<>> +recurs @MYIP www.facebook.com
; (1 server found)
;; global options: ...
0
votes
0answers
19 views
Preventing abuse on a local VPN Network [closed]
Are there ways to secure a public VPN to prevent people who are on from attempting to dos or port scan other hosts on the same local network on an OpenVPN VPN?
1
vote
2answers
40 views
how do I avoid spam domains to point to my site or IP hosting tomcat application
I can across a issue where I saw some xyz.com is pointing to mydomain.com. I am not using Apache, nor IIS but Tomcat 7 directly.
How to I avoid such other spam domains pointing to mydomain.com?
I ...
0
votes
2answers
155 views
How do I disable functions on servers for particular directories?
I want to disable some functions on server to improve security of server. I followed these steps:
STEP: 1
Open php.ini file:
vi /etc/php.ini
STEP: 2
Find disable_functions and set new list as ...
-1
votes
1answer
46 views
What are the best practices to run a domain on machine? [closed]
I have a domain and I was hosted it on my own machine. I don't know what are the things should I consider for better and faster access. First I googled it but not found any relative info. What's my ...
7
votes
3answers
218 views
Hard disk write-once mode on Windows
Is it possible to force a hard disk into 'write-once' mode in Windows?
I want to securely store logs so they can't be changed, but I can't use tapes or optical media due to performance reasons.
2
votes
2answers
156 views
Can a virtual machine (VM) “hack” another VM running on the same physical machine? [closed]
For example:
if a VM is corrupted (hacked), what do I risk on others VMs running on the same physical machine?
What kind of security issues is there between VMs running on the same physical host?
...
0
votes
0answers
47 views
disable php_value / forbid override htaccess
I'm proposing to my clients a shared environment where they all have their open_basedir jailed directory tree.
This tree is generated dynamically, so I can't use a httpd.conf per directory directive, ...
0
votes
1answer
74 views
Allowing port 22 on localhost VPN only
I rent a remote server, and run an OpenVPN service on this server. I am trying to secure my firewall (iptables) so the only person who can access SSH is somebody connected to the VPN (localhost). ...
0
votes
0answers
12 views
I can see libxml2.so.2 instead of libxml2.so, are they different
According to a tutorial related to Directadmin security, described at http://forum.directadmin.com/showthread.php?t=22587, the extension libxml2.so should be loaded, but now I can see that the file ...
0
votes
1answer
90 views
Many of joomla websites on my server have been hacked; no other kind of website [duplicate]
Today I got that many of Joomla websites on my server are hacked.
Some of the hacked joomlas were updated (the last version from 2.5 series) with the last version.
In many cases, the main index.php ...
0
votes
2answers
93 views
Windows Security: can user read local files with only 'Log on as a batch job'?
A Windows Scheduled Task runs as serviceAccount@domain.tld on a 2008R2 server. The server's local disk has some files that Joe Blow should not see. Joe Blow knows the serviceAccount password. As far ...
-1
votes
1answer
64 views
Software solution for centralized server management [closed]
We operate around 20 servers, mostly running Debian. We are now planning a project migrating all servers to CentOS and reducing the amount of servers to save rack space. Being a virtual company (i.e. ...
3
votes
1answer
149 views
What is the rationale for a minimum password age?
I just had a user unable to change his password on a Windows 2008 domain. It was giving him a cryptic message about complexity requirements even though he was certain his chosen password was meeting ...
-1
votes
1answer
71 views
Apache VirtualHost File System Security on a Shared Host [closed]
I am hosting my Wordpress blog on a shared server (not a commercial one). It's a Ubuntu Linux server with Apache, PHP, MySQL. Virtual host files are stored in separate folders under /home.
All ...
1
vote
1answer
61 views
sudo passwd on Ubuntu 11.10 strange behavior. Have I been rooted?
I'm in a really strange situation. A few hours ago Rackspace issued a ticket saying there's a outbound flood originating from my server.
Thinking the server might have been rooted with a rootkit I ...
1
vote
0answers
45 views
Best Practices for securing a Ubuntu VPS and it services [duplicate]
I recently acquired a VPS which i want to use a web hosting server using NGINX and PHP-FPM, and as XMPP server via ejaberd.
I have SSH acces to the VPS, Naturraly want to have FTP to i can upload my ...
0
votes
1answer
33 views
ssyn.c and slow.c used on my VPS [duplicate]
I have noticed some changes on VPS Debian Squeeze and looked with history to see what commands were run. Then I found some which I'm 100% sure I didn't run because I don't know what are they. Somebody ...
8
votes
1answer
200 views
Where can I embed proprietary information in a layer 2 or layer 3 packet?
The Citrix Netscaler has an interesting property that embeds information in the TCP packet that gets sent to the host. This property is echoed back to the Netscaler in such a way that the Netscaler ...
1
vote
1answer
31 views
How to setup NT Challenge on Windows 2008 R2
I want to setup NT Challenge for a web application. I have read a lot of articles but still not clear how can I setup it on windows server R2. Could anyone please point me settings/Configurations to ...
0
votes
2answers
36 views
puppet enterprise node install - Security risk?
I am learning puppet and using this tool install puppet clients on nodes.
puppet node install --login=root --keyfile=~/.ssh/id_rsa --install-script puppet-enterprise --installer-payload ...
2
votes
4answers
438 views
Is this a 'port scan'?
Is it still considered a 'port scan' to have scripts trying to SSH in with a list of common account names or trying multiple passwords for 'root' or 'mail' (or similar)? I'm hoping to find a way to ...
0
votes
0answers
27 views
How to stop amplification attacks BIND DNS? [duplicate]
I am having trouble determining what values I should set my rate-limit to.
The only example I have seen is this ...
rate-limit {
responses-per-second 5;
window 5;
};
...
1
vote
1answer
21 views
Task Scheduler with Virtual Accounts, possible?
Currently I'm using LOCAL SERVICE as the user account for various regular tasks, and was wondering if it was possible to use a Virtual Account instead.
Task Scheduler seems to reject NT SERVICE\ ...
0
votes
2answers
104 views
Shared folder are inaccessible from system account
I have problem with different behavior of network machines. Little log:
C:\Windows\system32>whoami
nt authority\system
C:\Windows\system32>net view
Server Name Remark
...
0
votes
1answer
40 views
SSL configuration for domain pointing to EC2 instance
I have my custom domain pointing to an EC2 instance.
Say mydomain.com -> [Elastic IP address for my EC2]
I would like to add SSL certificates so that I can access the site via https - ...
-1
votes
2answers
77 views
What types of security threats does a vlan protect against? [closed]
I'm learning about vlans. The literature says that they provide improved performance and security by segrating the physical network into separate "virtual" networks.
I understand the performance ...
1
vote
1answer
56 views
Communications between Amazon EC2 VMs in VPCs across different regions?
I am building a Web site that will have users in the US and in Europe. I setup an Amazon Virtual Private Cloud (VPC) in the US-east region, and another VPC in Europe-west region. I also configured ...
3
votes
1answer
113 views
Should I dual home our webservers (DMZ/Internal network) or just do 1-to-1 NAT?
I'm setting up a rack of servers which will have 2 webservers and 10 internal servers that provide back end application support (migrating from an AWS environment). We'll have virtual machine ...
1
vote
1answer
40 views
Forwarding access to a subset of ssh-agent identitites
I work for two companies (let's call them RedCorp and BlueCorp). They both trust me but they don't trust each other, and I don't want to expose either's secrets to the other.
My laptop's ssh-agent ...
-1
votes
1answer
52 views
Server is unable to make outgoing ftp requests. How to open this?
I have setup a new server on rackspace & have used these exact rules in iptables http://articles.slicehost.com/assets/2007/9/4/iptables.txt
I don't want server to act as a ftp server but when I ...
0
votes
0answers
14 views
Securing Windows 2008, moving logs ocation to other system [duplicate]
Our company want to put out VM with Windows Server 2008 to the Internet.
The thing is, we need to provide maximum security of this system. How to do that?
I know the password should be very long and ...
0
votes
1answer
63 views
Can encfs be compromised if attacker knows a file name on the encrypted file system?
Good morning,
I was wondering, if encfs also encrypts the file names (presumably using the same key as that used to encrypt their contents) such that each encrypted filename or directory corresponds ...
1
vote
2answers
131 views
PHP web hosting: how to prevent clients to DOS/DDOS?
I'm providing a partial web hosting solution where my clients may upload and execute their own php scripts.
Besides the security routine I'll have to check (off topic here) I would like to know ...
0
votes
1answer
71 views
Possible causes of high download activity on network [closed]
We had an issue where we noticed approximately 170GB of data downloaded as http traffic over a one week period on our network. After locking down many services and running a hub as an in between ...
0
votes
2answers
148 views
Detect process that is doing an outbound DDoS attack [duplicate]
My web host has informed me that my Fedora server is the source of an outbound DDoS attack on somebody. The web host didn't give any other information. How can I find out what process is doing the ...
0
votes
1answer
68 views
Stop server's use as proxy
I have a vps server on which I have configured apache as a webserver.
Because of unexpected high usage of bandwidth, I checked the access log of my server yesterday.
There were a lot of requests of ...
0
votes
2answers
112 views
When to use self-signed certificate with RDWeb?
I want to make sure the users connection is as secure as possible. Our RDWeb server has a .local name (for this question it will be called rdweb.contoso.local) and a public name: rdweb.contoso.com
...
1
vote
1answer
123 views
How to drop all network input on IP with IPTABLES
With IPTABLES, Is it possible to DROP all network INPUT based on the host or the IP requested?
I want my server reject all incoming transmission if it is the IP who is called E.G.:
Dropped:
ssh ...
